Buffer overflow in Liftweb Lift

CVE-2013-3300

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.

Vulnerability class: Buffer Overflow

EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.

Affected products

Liftweb Lift — versions 2.1, 2.2, 2.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)